FIMCM - User search error - 0x80072116

Hello Guys,

I install FIMCM on this environnment

Active directory: 1 forest; 5domain (1root + 4childs) (NETBIOS Names are different than FQDN)
FIMServer: Win2008R2
SQLServer 2008R2

When i try to search for a user i've just created in a child domain (not yet replicated), i've the following issue:

Name translation: Could not find the name or insufficient right to see name. (Exception from HRESULT: 0x80072116)

It's it very critical because if I create u user named "Bob", since it's not replicated, all forest's users named "bob" are unreachable and provide me the same issue.

Is there some special right to assign in child domain?

Here the error details:

Log Name: Application

Source: ASP.NET 2.0.50727.0

Date: 9/1/2010 5:15:45 PM

Event ID: 1309

Task Category: Web Event

Level: Warning

Keywords: Classic

User: N/A

Computer: SERVERFIM01.contoso.com

Description:

Event code: 3005

Event message: An unhandled exception has occurred.

Event time: 9/1/2010 5:15:45 PM

Event time (UTC): 9/1/2010 3:15:45 PM

Event ID: 965a260210b147dab4f32b4d5d85ec06

Event sequence: 106

Event occurrence: 5

Event detail code: 0

Application information:

Application domain: /LM/W3SVC/1/ROOT/CertificateManagement-1-129278268970576853

Trust level: Full

Application Virtual Path: /CertificateManagement

Application Path: C:\Program Files\Microsoft Forefront Identity Manager\2010\Certificate Management\web\

Machine name: SERVERFIM01

Process information:

Process ID: 332

Process name: w3wp.exe

Account name: ROOTDOMAIN\ssvc-FIMCM-WebPool

Exception information:

Exception type: COMException

Exception message: Name translation: Could not find the name or insufficient right to see name. (Exception from HRESULT: 0x80072116)

Request information:

Request URL: http://SERVERFIM01/CertificateManagement/content/idn/certificates/UserSearch.aspx

Request path: /CertificateManagement/content/idn/certificates/UserSearch.aspx

User host address: XX.XX.XX.XX

User: ROOTDOMAIN\admin

Is authenticated: True

Authentication Type: Negotiate

Thread account name: ROOTDOMAIN\ssvc-FIMCM-WebPool

Thread information:

Thread ID: 4

Thread account name: ROOTDOMAIN\ssvc-FIMCM-WebPool

Is impersonating: False

Stack trace: at Microsoft.Clm.Interop.activeds.NameTranslateClass.Set(Int32 lnSetType, String bstrADsPath)

at Microsoft.Clm.DS.NameTranslator.Translate(String name, NameType from, NameType to)

at Microsoft.Clm.DS.NameTranslator.ConvertToNT4Name(String name)

at Microsoft.Clm.BusinessLayer.Users.ConvertNameToNT4(String name)

at Microsoft.Clm.Web.MyUserSearch.outputGrid_InitializeRow(Object sender, RowEventArgs e)

at Infragistics.WebUI.UltraWebGrid.UltraWebGrid.OnInitializeRow(UltraGridRow row, Object data)

at Infragistics.WebUI.UltraWebGrid.DBBinding.FillRows(UltraWebGrid grid, RowsCollection rows, IEnumerable datasource)

at Infragistics.WebUI.UltraWebGrid.DBBinding.BindList(IEnumerable datasource)

at Infragistics.WebUI.UltraWebGrid.DBBinding.DataBind(Object dataSource, String dataMember)

at Infragistics.WebUI.UltraWebGrid.UltraWebGrid.DataBind()

at Microsoft.Clm.Web.MyUserSearch.SearchUsers()

at Microsoft.Clm.Web.MyUserSearch.searchButton_Click(Object sender, EventArgs e)

at System.Web.UI.WebControls.LinkButton.OnClick(EventArgs e)

at System.Web.UI.WebControls.LinkButton.RaisePostBackEvent(String eventArgument)

at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)

at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Custom event details:

Event Xml:

<Channel>Application</Channel>

<Computer>SERVERFIM01.contoso.com</Computer>

</System>

<Data>An unhandled exception has occurred.</Data>

<Data>/LM/W3SVC/1/ROOT/CertificateManagement-1-129278268970576853</Data>

<Data>/CertificateManagement</Data>

<Data>C:\Program Files\Microsoft Forefront Identity Manager\2010\Certificate Management\web\</Data>

<Data>SERVERFIM01</Data>

<Data>

</Data>

<Data>ROOTDOMAIN\ssvc-FIMCM-WebPool</Data>

<Data>COMException</Data>

<Data>Name translation: Could not find the name or insufficient right to see name. (Exception from HRESULT: 0x80072116)</Data>

<Data>http://SERVERFIM01/CertificateManagement/content/idn/certificates/UserSearch.aspx</Data>

<Data>/CertificateManagement/content/idn/certificates/UserSearch.aspx</Data>

<Data>ROOTDOMAIN\admin</Data>

<Data>Negotiate</Data>

<Data>ROOTDOMAIN\ssvc-FIMCM-WebPool</Data>

<Data>ROOTDOMAIN\ssvc-FIMCM-WebPool</Data>

<Data>False</Data>

<Data> at Microsoft.Clm.Interop.activeds.NameTranslateClass.Set(Int32 lnSetType, String bstrADsPath)